From consoleteam@gmail.com Fri Apr 17 17:47:35 2009
Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.224])
	by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n3HHlTWG022673
	for <users@conserver.com>; Fri, 17 Apr 2009 17:47:35 GMT
Received: by rv-out-0506.google.com with SMTP id l9so928479rvb.51
	for <users@conserver.com>; Fri, 17 Apr 2009 10:47:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:mime-version:received:date:message-id:subject
	:from:to:content-type;
	bh=G1MheasOoT/V9PqGM2qy/LFE04u13V8Dy3XzQNJCmZk=;
	b=FAh5VQKKFkRLxuyLL+WPQ7N2kK7JLqlY4d1sx21e9nL79uMfnw03vejc/NNJDaJo6N
	pa3bMxYaokfJygzHgLN4ShfSiAGPXI/Uzi2AQCXAjW3VZFvcdhjwbKXAfQsVRSUdW64X
	Ot6qHOpwINE3bsI9R/4aght+maagfMjHHxZfU=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:date:message-id:subject:from:to:content-type;
	b=J+Et/LTAPhAErUUutz7KEVB6H5v4LY8hq4kXiwspkUe2XW63UKmO7t4Yvo9RGOh6p6
	ASzc8IwUvjV3sf/aPDU9xBFyFvEP08OYWybn52U0a1IKutpOxiS6kkwjeyZPkHJXsx/H
	lZXaeiV/ivs2zW2ei0YvSENVixVPcQizPVjFo=
MIME-Version: 1.0
Received: by 10.141.156.7 with SMTP id i7mr1298624rvo.23.1239990449168; Fri, 
	17 Apr 2009 10:47:29 -0700 (PDT)
Date: Fri, 17 Apr 2009 10:47:29 -0700
Message-ID: <ceaa1250904171047i60590ed0pe3e289587ed20207@mail.gmail.com>
Subject: Conserver through a proxy server?
From: Zonker <consoleteam@gmail.com>
To: users@conserver.com
Content-Type: multipart/alternative; boundary=000e0cd14c9e3f63c80467c3c6ef
X-Spam-Score: -2.311 () BAYES_00,HTML_MESSAGE
X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30
X-BeenThere: users@conserver.com
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Conserver Users <users.conserver.com>
List-Unsubscribe: <https://www.conserver.com/mailman/options/users>,
	<mailto:users-request@conserver.com?subject=unsubscribe>
List-Archive: <https://www.conserver.com/pipermail/users>
List-Post: <mailto:users@conserver.com>
List-Help: <mailto:users-request@conserver.com?subject=help>
List-Subscribe: <https://www.conserver.com/mailman/listinfo/users>,
	<mailto:users-request@conserver.com?subject=subscribe>
X-List-Received-Date: Fri, 17 Apr 2009 17:47:35 -0000

--000e0cd14c9e3f63c80467c3c6ef
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

  I find myself in a situation where I must access a restricted network via
a proxy server.

  Conserver here is a "normal" setup... many local (in-building) console
servers, and a few remote console servers via the WAN, all using RAW
connections to the console server ports.

  The new twist is that we need to manage ports on a secured network. Using
a VPN is not an option offered to us. The Conserver host has a Production
interface, and a backup net interface. The host does not have a free card
slot for an additional Ethernet interface. (It would be politically
difficult to put secondary addressing on the Production net, and it would be
a security risk to overlay a new network on the Backup network...)

  It looks like I might be able to use IPTables to do this (point to a proxy
for a specific subnet), then I need to see if I can get ports on the proxy
to bounce me to the console ports. Has anyone done it this way? How did that
work out for you?

    Thanks in advance for your replies, and best regards,

          -Z-

-- 
ConsoleTeam - Support and training services for Conserver users.
www.conserver.com/consoles/
consoleteam.blogspot.com

--000e0cd14c9e3f63c80467c3c6ef
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

=A0 I find myself in a situation where I must access a restricted network v=
ia a proxy server.<br><br>=A0
Conserver here is a &quot;normal&quot; setup... many local (in-building) co=
nsole
servers, and a few remote console servers via the WAN, all using RAW
connections to the console server ports.<br>
<br>=A0 The new twist is that we need to manage ports on a secured
network. Using a VPN is not an option offered to us. The Conserver host
has a Production interface, and a backup net interface. The host does
not have a free card slot for an additional Ethernet interface. (It
would be politically difficult to put secondary addressing on the
Production net, and it would be a security risk to overlay a new
network on the Backup network...)<br clear=3D"all">
<br>=A0 It looks like I might be able to use IPTables to do this (point to =
a proxy for a specific subnet), then I need to see if I
can get ports on the proxy to bounce me to the console ports. Has
anyone done it this way? How did that work out for you?<br><br>=A0=A0=A0 Th=
anks in advance for your replies, and best regards,<br>
<br>=A0=A0=A0=A0=A0=A0=A0=A0=A0 -Z-<br><br>-- <br>ConsoleTeam - Support and=
 training services for Conserver users.<br><a href=3D"http://www.conserver.=
com/consoles/">www.conserver.com/consoles/</a><br><a href=3D"http://console=
team.blogspot.com">consoleteam.blogspot.com</a><br>


--000e0cd14c9e3f63c80467c3c6ef--